What should you do?
Your network contains an Active Directory domain named contoso.com. Contoso.com contains two domain controllers. The domain controllers are configured as show in the following table.
————————————————————————————————————————————-
Server Server IP Address Server site
————————————————————————————————————————————-
DC1 10.1.1.1/16 Default-First-Site-Name
DC2 10.1.1.2/16 Default-First-Site-Name
————————————————————————————————————————————-
All client computers have IP addresses in the 10.1.2.1 to 10.1.2.240
You need to minimize the number of client authentication requests send to DC2.
What should you do?
Which two actions should you perform?
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and eu.contoso.com. All domain controllers are DNS servers. The domain controllers in contoso.com host the zone for contoso.com. The domain controllers in eu.contoso.com host the zone for eu.contoso.com The DNS zone for contoso.com is configured as shown in the exhibit. (Click the Exhibit button.)
You need to ensure that all domain controllers in the forest host a writable copy of _msdsc.contoso.com
Which two actions should you perform? (Each correct answers presents part of the solution. Choose two.)
Exhibit:
What should you do?
You have an Active Directory domain named contoso.com. You have a domain controller named Server1 that is configured as a DNS server. Server1 hosts a standard primary zone for contoso.com. The DNS configuration of Server1 is shown in the exhibit. (Click the Exhibit button.)
You discover that stale resource records are not automatically removed from the contoso.com zone.
You need to ensure that the stale resource records are automatically removed from the contoso.com zone.
What should you do?
Which two actions should you perform?
Your network contains an Active Directory domain named contoso.com. Contoso.com contains three servers.The servers are configure as shown in the following table.
Server name Server Role Service
Server1 Certification authority (CA)
Server2 Certificate Enrollment Web Service
Server3 Certificate Enrollment Policy Web Service
You need to ensure that users can manually enroll and renew their certificates by using the Certificate Enrollment Web Service.
Which two actions should you perform? (Each corrent answer presents part of the solution. Choose two).
What should you do?
Your company has an Active Directory domain named contoso.com. The company network has two DNS servers named DNS1 and DNS2.
The DNS servers are configured as shown in the following table:
DNS1
DNS2
_msdcs.contoso.com
contoso.com
.(root)
_msdcs.contoso.com
contoso.com
Domain users, who are configured to use DNS2 as the preferred DNS server, are unable to connect to Internet Web sites.
You need to enable Internet name resolution for all client computers.
What should you do?
What should you do first?
Your network contains an Active Directory domain named contoso.com. The domain contains the servers shown in the following table:
Server name
Operating system
Role
DC1
Windows Server 2008
Domain controller
DC2
Windows Server 2008 R2
Domain controller
DNS1
Windows Server 2008
DNS server
DNS2
Windows Server 2008 R2
DNS server
The functional level of the forest is Windows Server 2003. The functional level of the domain is Windows Server 2003. DNS1 and DNS2 host the contoso.com zone. All client computers run Windows 7 Enterprise.
You need to ensure that all of the names in the contoso.com zone are secured by using DNSSEC.
What should you do first?
What should you do?
Your network contains an Active Directory domain. The domain is configured as shown in the following table:
Active Directory site
Domain controllers
Main
DC1 and DC2
Branch1
DC3
Branch2
None
Users in Branch2 sometimes authenticate to a domain controller in Branch1.
You need to ensure that users in Branch2 only authenticate to the domain controllers in Main.
What should you do?
Which utility should you run?
You create 200 new user accounts. The users are located in six different sites. New users report that they receive the following error message when they try to log on: "The username or password is incorrect." You confirm that the user accounts exist and are enabled. You also confirm that the user name and password information supplied are correct.
You need to identify the cause of the failure. You also need to ensure that the new users are able to log on.
Which utility should you run?
What should you do?
Your company has an Active Directory domain. A user attempts to log on to the domain from a client computer and receives the following message: "This user account has expired. Ask your administrator to reactivate the account."
You need to ensure that the user is able to log on to the domain.
What should you do?
Which two actions should you perform?
Your company has an Active Directory forest that runs at the functional level of Windows Server 2008. You implement Active Directory Rights Management Services (AD RMS). You install Microsoft SQL Server 2005.
When you attempt to open the AD RMS administration Web site, you receive the following error message: "SQL Server does not exist or access denied."
You need to open the AD RMS administration Web site.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)